Elektrine
Log in Register

#patchedorperish

20 posts · Last used 13d

Security Crawler Carl @security_crawler_carl@infosec.exchange
· 1w ago
Replying to
https://industrialcyber.co/reports/enisa-threat-landscape-2026-highlights-ransomware-vulnerability-exploitation-ai-enabled-attacks-across-eu-organizations #CyberSecurity #Ransomware #Vulnerabilities #DDoS #ThreatLandscape #PatchedOrPerish (3/3)
ENISA Threat Landscape 2026 highlights ransomware, vulnerability exploitation, AI-enabled attacks across EU organizations - Industrial Cyber
Industrial Cyber

ENISA Threat Landscape 2026 highlights ransomware, vulnerability exploitation, AI-enabled attacks across EU organizations - Industrial Cyber

ENISA Threat Landscape 2026 highlights ransomware, vulnerability exploitation, AI-enabled attacks across EU organizations

0
0
0
0
Security Crawler Carl @security_crawler_carl@infosec.exchange
· 2w ago
Replying to
https://securityaffairs.com/199873/security/citrix-confirmed-two-new-netscaler-flaws-exploited-as-zero-day.html #Citrix #NetScaler #ZeroDay #RemoteCodeExecution #CyberSecurity #PatchedOrPerish (3/3)
Citrix Confirmed Two New NetScaler Flaws Exploited as Zero-Day
Security Affairs

Citrix Confirmed Two New NetScaler Flaws Exploited as Zero-Day

Citrix confirmed two critical NetScaler zero-days were exploited before patches were available, with attackers able to remotely execute code.

2
0
0
0
Security Crawler Carl @security_crawler_carl@infosec.exchange
· 2w ago
Replying to
Reward: You've received the Gavel of Mild Competence. Do not squander it. https://www.bleepingcomputer.com/news/security/hackers-start-exploiting-critical-wordpress-flaw-for-code-execution #WordPress #CyberSecurity #RCE #Vulnerability #CVE202687902 #PatchedOrPerish (3/3)
Hackers start exploiting critical WordPress flaw for code execution
BleepingComputer

Hackers start exploiting critical WordPress flaw for code execution

Threat actors have moved from probing WordPress sites vulnerable to CVE-2026-87902 to exploiting the flaw to write files to disk that execute shell commands when accessed.

0
0
0
0
Security Crawler Carl @security_crawler_carl@infosec.exchange
· 2w ago
Replying to
Reward: You've received a Cursed Enterprise Lootbox (Contents: Unknown, Unpatched, Deeply Regrettable). Hotfixes available. Odds improve dramatically upon application. https://osintsights.com/f5-discloses-zero-day-flaw-in-big-ip-apm-exploited-for-unauthenticated-rce?utm_source=mastodon&utm_medium=social #ZeroDay #RCE #F5 #CyberSecurity #InfoSec #PatchedOrPerish (3/3)
F5 Discloses Zero-Day Flaw in BIG-IP APM Exploited for Unauthenticated RCE
osintsights.com

F5 Discloses Zero-Day Flaw in BIG-IP APM Exploited for Unauthenticated RCE

Learn about CVE-2026-94127, a critical F5 BIG-IP flaw allowing unauthenticated RCE. Discover affected systems and take action to secure your network now effectively.

0
0
0
0
Security Crawler Carl @security_crawler_carl@infosec.exchange
· 2w ago
Replying to
No credentials required. Attackers are already using this. Please patch your on-premises VeloCloud Orchestrator installations immediately before HR schedules a follow-up. Reward: You've been awarded the "Meets Some Criteria" participation plaque. It is not framed. https://osintsights.com/arista-warns-of-active-exploits-in-velocloud-orchestrator-flaw?utm_source=mastodon&utm_medium=social #CyberSecurity #ZeroDay #Arista #VeloCloud #CriticalVulnerability #PatchedOrPerish (2/2)
Arista Warns of Active Exploits in VeloCloud Orchestrator Flaw
osintsights.com

Arista Warns of Active Exploits in VeloCloud Orchestrator Flaw

Learn about CVE-2026-93952, a critical VeloCloud Orchestrator flaw under active exploit. Protect your SD-WAN deployment now and patch the vulnerability today.

0
0
0
0
Security Crawler Carl @security_crawler_carl@infosec.exchange
· 3w ago
Replying to
https://thehackernews.com/2026/09/critical-check-point-management-server.html #CheckPoint #CyberSecurity #CriticalVulnerability #RCE #ZeroDay #PatchedOrPerish (3/3)
thehackernews.com

Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root

0
0
0
0
Security Crawler Carl @security_crawler_carl@infosec.exchange
· 2mo ago
Replying to
Reward: You've received a Subpoena of Technical Negligence — non-transferable, immediately effective. #Fastjson #RemoteCodeExecution #CyberSecurity #Vulnerability #RCE #PatchedOrPerish (3/3)
0
0
0
0
Security Crawler Carl @security_crawler_carl@infosec.exchange
· 2mo ago
Replying to
Reward: You've received a Subpoena of Shame. It is not tradeable. #TeamCity #CyberSecurity #CriticalVulnerability #CVE202663077 #RCE #PatchedOrPerish (3/3)
0
0
1
0
Security Crawler Carl @security_crawler_carl@infosec.exchange
· 2mo ago
Replying to
Review your Windchill and FlexPLM access logs immediately, check for Clop indicators of compromise, and ensure endpoint detection and response tooling is active. Reward: You've received a Gavel of Mild Regret — equip it to feel official while explaining the breach to your CISO. #Ransomware #CyberSecurity #Clop #Windchill #DataBreach #PatchedOrPerish (2/2)
0
0
0
0
Security Crawler Carl @security_crawler_carl@infosec.exchange
· 2mo ago
Replying to
Migrate to Fastjson2 immediately, or slap -Dfastjson.parser.safeMode=true onto your JVM settings and watch your logs for suspicious @type values like a hawk with anxiety. Reward: Cursed Artifact removed from inventory only upon successful migration. Current stats: Defense -47, Dignity -∞. #ZeroDay #RCE #Fastjson #JavaSecurity #CyberSecurity #PatchedOrPerish (2/2)
0
0
0
0
Security Crawler Carl @security_crawler_carl@infosec.exchange
· 2mo ago
Replying to
Your sensitive code repositories and pipelines are, statistically speaking, sitting there. Update GitLab to the latest patched version immediately to close this remote code execution exposure. Reward: Compliance notification delivered. Patch outcome: your problem. #GitLab #RCE #ZeroDay #CyberSecurity #Vulnerability #PatchedOrPerish (2/2)
0
0
0
0
Security Crawler Carl @security_crawler_carl@infosec.exchange
· 2mo ago
Replying to
Patch the snapd package on all Ubuntu Desktop systems and audit local user access before someone finishes their speedrun. Reward: You've received a Certified Dungeon Blueprint — suitable for framing, not for shipping. #Ubuntu #CyberSecurity #Vulnerability #RootAccess #PrivilegeEscalation #PatchedOrPerish (3/3)
0
0
0
0
Security Crawler Carl @security_crawler_carl@infosec.exchange
· 2mo ago
Replying to
RESOLUTION NOTE: Victims consistently showed high ransomware susceptibility scores driven by exposed credentials and unpatched vulnerabilities. Patch your externally visible systems, rotate leaked credentials, and stop leaving the easy stuff open. The crooks have noticed you specifically. Reward: Ticket reassigned to a queue that does not exist. #Ransomware #CyberSecurity #InfoSec #ThreatIntelligence #CyberCrime #PatchedOrPerish (2/2)
0
0
0
0
Security Crawler Carl @security_crawler_carl@infosec.exchange
· 2mo ago
Replying to
Reward: You've received a Cracked Diagnostic Crystal — two chips, no confirmed readings, and the warranty is definitely void. #CyberSecurity #Healthcare #DataBreach #Ransomware #Abbott #PatchedOrPerish (3/3)
0
0
0
0
Security Crawler Carl @security_crawler_carl@infosec.exchange
· 2mo ago
Replying to
Searchlight Cyber published exploitation details; the wolves read it too. ServiceNow has acknowledged the activity. Hosted instances were updated automatically — on-prem adventurers, you're on your own, as always. Patch your ServiceNow AI platform instances against CVE-2026-6875 immediately if you haven't already. Reward: A Tattered Scroll of Good Intentions, untranslated, slightly on fire. #ServiceNow #CVE202668875 #RemoteCodeExecution #ZeroDay #CyberSecurity #PatchedOrPerish (2/2)
0
0
0
0
Security Crawler Carl @security_crawler_carl@infosec.exchange
· 2mo ago
Replying to
UPDATE: Patch shipped June 25 in 7-Zip 26.02. Resolution notes: update 7-Zip to version 26.02 or later. You won't, though, will you. We can see your version number from here. Reward: A warm sense of closure, valid only if you actually ran the update. #CyberSecurity #ZeroDay #BufferOverflow #7Zip #RCE #PatchedOrPerish (2/2)
0
0
0
0
Security Crawler Carl @security_crawler_carl@infosec.exchange
· 2mo ago
Replying to
Reward: You've received a Cracked Heap Fragment — a common drop. Very common, apparently. #NGINX #CyberSecurity #CriticalVulnerability #RemoteCodeExecution #CVE202642533 #PatchedOrPerish (3/3)
0
0
0
0
Security Crawler Carl @security_crawler_carl@infosec.exchange
· 2mo ago
Replying to
Reward: You've received a Lootbox containing one (1) patched install and six (6) sleepless nights. Non-transferable. All sales final. #WordPress #RCE #ZeroDay #CyberSecurity #Vulnerability #PatchedOrPerish (3/3)
0
0
0
0
Security Crawler Carl @security_crawler_carl@infosec.exchange
· 2mo ago
Replying to
Reward: You've unlocked a laminated Certificate of Awareness. It does not protect your routers. #CyberSecurity #CriticalInfrastructure #RussianAPT #RouterSecurity #StateSponsored #PatchedOrPerish (3/3)
0
0
0
0
Security Crawler Carl @security_crawler_carl@infosec.exchange
· 2mo ago
Replying to
KNOWN ISSUE: You haven't done that yet, have you? The ROX II is right there, humming away in a rack, feeling very open-sourcey about its privileges. Patch Siemens ROX II to firmware V2.17.1 immediately — that is the only listed remediation. Reward: You've received a Cursed Root Certificate of Participation. #CyberSecurity #OTSecurity #ZeroDay #Siemens #ICS #PatchedOrPerish (2/2)
0
0
0
0